
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier: H/43ooF1vCMs1uD4P12xhfweVNkAE9+SvCZzQQ9vKiU=
Subject key identifier: EE:F4:E5:A3:5D:6F:6C:95:C8:1D:6C:10:4B:00:5F:3A:97:BE:04:96
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 019CAC7DB95DC4AB71F81E986B9471459CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number: 0E19
Signing time: Mon 02 Mar 2026 03:00:46 +0000
Manifest this update: Mon 02 Mar 2026 03:00:46 +0000
Manifest next update: Tue 03 Mar 2026 03:00:46 +0000
Files and hashes: 1: HsWvQkqyqgqDj3X8qhIGW0Flnwc.roa (hash: jMcB1wDEamsFEqTFzPF8IyJgQTNPejP9vTcaIBOsBpk=)
2: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: w+0JsiNzvrxBwpq1mmT0pUjfy5wUbNllbCOyqvHIyjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b9:5d:c4:ab:71:f8:1e:98:6b:94:71:45:9c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Mar 2 03:00:46 2026 GMT
Not After : Mar 3 03:00:46 2026 GMT
Subject: CN=eef4e5a35d6f6c95c81d6c104b005f3a97be0496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:eb:81:fa:09:23:c9:6c:49:8e:1d:79:c0:
73:3e:d5:ae:b4:05:1c:52:ce:4c:81:11:b0:54:17:
22:c5:3d:f3:94:5f:0e:ad:e5:b2:9b:19:d6:9d:f0:
c1:35:6c:47:e7:68:68:53:25:39:0d:1e:85:58:88:
5e:39:bb:a2:2b:28:52:c0:5d:00:52:37:4b:7b:df:
00:03:2f:20:6c:fc:9d:15:8b:61:b5:1f:a6:86:4a:
49:4f:d3:e4:84:95:ac:48:47:31:16:40:c9:fe:3b:
69:e6:ae:cb:25:23:f5:0b:71:f8:f0:07:0e:66:2f:
e3:ee:f6:11:63:24:c0:86:ea:44:51:96:de:c0:8a:
86:9b:02:b9:d8:7f:84:1c:13:16:a7:00:ab:8b:f7:
41:42:3d:3c:eb:81:03:5a:e0:67:48:f7:b1:72:41:
19:98:32:1c:13:d1:0b:b8:e4:9c:56:c6:71:42:a8:
f7:8b:a7:60:9b:fe:83:ab:6f:0f:a2:f3:b4:13:22:
ad:d3:58:9d:e9:b7:3c:a3:7f:80:1d:e7:4d:24:dc:
4c:f5:e9:c3:94:b3:20:c0:96:bc:52:0d:e7:ca:b7:
5e:e7:5c:94:05:e4:44:b6:97:5a:80:0e:c9:ce:3d:
8e:eb:80:42:0c:99:a7:15:b4:97:98:c3:71:44:38:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F4:E5:A3:5D:6F:6C:95:C8:1D:6C:10:4B:00:5F:3A:97:BE:04:96
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:73:62:87:80:92:ce:3b:c7:7e:53:30:71:4d:a9:4c:d8:2b:
3f:8f:6a:f1:7d:89:47:2c:50:d3:4c:bd:bd:20:54:1b:89:61:
42:c8:ee:16:e4:f6:c2:ef:2f:48:74:3c:97:27:60:4f:9a:cd:
3f:59:c4:72:f2:59:1e:b9:49:02:a0:8c:f0:5d:bb:8a:29:da:
e7:26:8f:ea:12:ad:d5:56:ed:50:e3:d6:b2:3f:e1:0f:1b:79:
9f:1a:6b:01:4f:cc:96:b6:f9:0e:91:93:5b:2c:23:cb:0c:a4:
fb:ff:af:6e:8a:c3:df:72:d8:8d:62:16:b9:4c:3b:7b:d6:82:
48:51:dd:8e:fa:fe:d4:00:14:3b:57:a7:3d:bc:59:30:aa:d2:
a1:77:e5:d3:89:d0:d0:36:87:f4:c2:7b:b2:7f:ad:cf:e2:f8:
4e:d7:08:bd:9c:61:c5:09:bc:af:37:43:87:d0:f2:d8:da:7b:
c7:ce:a7:bf:12:d7:05:66:8a:a3:cb:89:62:1a:81:cc:e6:d3:
ab:a4:4c:e7:91:54:1f:5c:af:31:88:cb:82:e6:04:cb:be:69:
36:05:9b:89:27:dd:95:91:e1:d3:91:dc:43:8b:3f:2a:2c:74:
66:22:92:8c:31:90:e0:ca:17:d0:56:39:55:d5:24:55:9e:8d:
7b:61:11:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfbldxKtx+B6Ya5RxRZz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNDk5ZWVhMWYwOWQwMTEyMjUyOGQ0MTc1NGQzN2M1Y2Fh
MzRiYTcwHhcNMjYwMzAyMDMwMDQ2WhcNMjYwMzAzMDMwMDQ2WjAzMTEwLwYDVQQD
EyhlZWY0ZTVhMzVkNmY2Yzk1YzgxZDZjMTA0YjAwNWYzYTk3YmUwNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzLrgfoJI8lsSY4decBzPtWutAUc
Us5MgRGwVBcixT3zlF8OreWymxnWnfDBNWxH52hoUyU5DR6FWIheObuiKyhSwF0A
UjdLe98AAy8gbPydFYthtR+mhkpJT9PkhJWsSEcxFkDJ/jtp5q7LJSP1C3H48AcO
Zi/j7vYRYyTAhupEUZbewIqGmwK52H+EHBMWpwCri/dBQj0864EDWuBnSPexckEZ
mDIcE9ELuOScVsZxQqj3i6dgm/6Dq28PovO0EyKt01id6bc8o3+AHedNJNxM9enD
lLMgwJa8Ug3nyrde51yUBeREtpdagA7Jzj2O64BCDJmnFbSXmMNxRDgAwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO705aNdb2yVyB1sEEsAXzqXvgSWMB8GA1UdIwQY
MBaAFGxJnuofCdARIlKNQXVNN8XKo0unMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEt
N2ZkZGQyMjIwMmJmLzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iZGViMjctMzQzNC00MjU0LTgyNDEtN2ZkZGQyMjIwMmJm
LzEvYkVtZTZoOEowQkVpVW8xQmRVMDN4Y3FqUzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHNih4CS
zjvHflMwcU2pTNgrP49q8X2JRyxQ00y9vSBUG4lhQsjuFuT2wu8vSHQ8lydgT5rN
P1nEcvJZHrlJAqCM8F27iina5yaP6hKt1VbtUOPWsj/hDxt5nxprAU/Mlrb5DpGT
Wywjywyk+/+vborD33LYjWIWuUw7e9aCSFHdjvr+1AAUO1enPbxZMKrSoXfl04nQ
0DaH9MJ7sn+tz+L4TtcIvZxhxQm8rzdDh9Dy2Np7x86nvxLXBWaKo8uJYhqBzObT
q6RM55FUH1yvMYjLguYEy75pNgWbiSfdlZHh05HcQ4s/Kix0ZiKSjDGQ4MoX0FY5
VdUkVZ6Ne2ERrw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:42 2026 by rpki-client